Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
File:                     FMxtyeCRBW52oT-Pinw1duzx27E.mft (raw, json)
Hash identifier:          /vG5rcNWq+OrPn8Vua/rSNFEXqlGllgWLwYF4zoEYYI=
Subject key identifier:   2E:C1:E3:1A:87:5D:B4:04:8A:59:33:53:48:BC:C8:54:16:22:88:ED
Authority key identifier: 14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1
Certificate issuer:       /CN=A91C9D04/serialNumber=14CC6DC9E091056E76A13F8F8A7C3576ECF1DBB1
Certificate serial:       15C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
Manifest number:          1EBE
Signing time:             Thu 24 Apr 2025 16:47:37 +0000
Manifest this update:     Thu 24 Apr 2025 16:47:36 +0000
Manifest next update:     Thu 01 May 2025 16:47:36 +0000
Files and hashes:         1: FMxtyeCRBW52oT-Pinw1duzx27E.crl (hash: IAjR0HtpdtHmd6XPEOFatlFMltqflB9wR2HZ2w9mWEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5573 (0x15c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D04, serialNumber=14CC6DC9E091056E76A13F8F8A7C3576ECF1DBB1
        Validity
            Not Before: Apr 24 16:47:36 2025 GMT
            Not After : May  1 16:47:36 2025 GMT
        Subject: CN=680a6b29-557c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:49:d1:3c:cd:51:73:24:6f:ef:05:1d:67:
                    63:e8:59:17:3b:0a:96:14:2e:56:83:26:43:ef:0d:
                    3a:47:e5:7c:e7:9d:ea:23:e3:ef:a3:7e:f2:21:65:
                    48:8f:b9:ac:66:f8:b2:ec:d2:0a:12:2e:ec:76:62:
                    13:77:52:e2:62:9d:6e:0d:d5:be:30:66:32:98:a4:
                    f2:6c:2c:24:89:4f:05:0d:04:0b:c3:3e:0b:ca:98:
                    cf:46:46:82:47:9d:2c:b6:7b:a0:33:90:e5:aa:13:
                    31:6f:0f:29:06:97:e1:18:0f:07:fc:a5:19:fb:88:
                    ba:4b:09:c0:68:e4:6e:00:ec:93:a2:3e:11:92:9f:
                    ec:02:f5:ec:9d:7a:80:11:6b:96:7f:37:71:43:5f:
                    5e:3c:55:7c:48:77:4e:e0:9d:05:05:91:00:0c:93:
                    c7:40:b6:fc:66:ab:75:a2:4d:b3:e4:8a:76:76:58:
                    ea:29:c3:f3:25:3e:68:38:ae:9c:3e:1c:9b:92:ad:
                    d6:be:4b:a1:e3:81:84:72:57:fd:b6:d9:a2:37:14:
                    d4:12:3d:b5:4f:ec:51:03:41:9a:61:93:cb:68:c6:
                    73:0a:aa:13:d1:f5:5b:8b:91:97:28:9a:cb:8c:88:
                    e9:e8:e9:67:ea:2e:a1:d0:73:b2:d6:5d:1a:26:db:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C1:E3:1A:87:5D:B4:04:8A:59:33:53:48:BC:C8:54:16:22:88:ED
            X509v3 Authority Key Identifier:
                keyid:14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:84:86:f8:dc:ee:eb:8a:36:4a:ab:3e:04:89:f0:6d:e1:7d:
         dc:73:80:0a:d6:16:d6:2f:c1:30:1b:c5:92:48:18:5d:5d:71:
         8c:73:39:d6:07:a9:2c:b8:d7:8b:0d:f4:16:8b:b8:59:0d:2d:
         04:68:cb:c3:70:39:cb:dd:63:0f:03:36:1c:2f:a3:8d:ce:84:
         91:9d:8f:3e:10:ff:07:3c:c3:4f:a8:ab:32:d0:35:2f:43:67:
         4e:20:95:8c:5e:7c:be:6a:94:2b:07:76:44:84:2c:54:cb:d7:
         a2:f7:b3:e4:0b:81:c3:2f:66:23:47:b9:58:b8:48:3e:1f:97:
         70:9d:b0:6b:74:36:f7:5c:b3:2b:be:36:c1:9d:a4:ef:ee:d2:
         4c:ee:22:00:58:b5:67:44:40:5b:30:97:9e:bf:89:15:c6:b4:
         96:44:f1:3b:9b:96:ed:05:21:bb:83:f4:c2:6b:3c:9e:14:1c:
         0f:3f:a2:82:8e:84:9d:61:9e:56:bc:07:93:0c:87:d7:23:2f:
         8f:90:3a:65:d5:88:3e:3f:09:db:65:f6:fe:88:82:0c:78:70:
         0f:93:fa:a5:aa:f1:0b:13:cd:f4:04:e7:64:23:56:56:53:19:
         67:98:0a:22:48:1c:29:ba:f1:a1:2b:ad:62:c8:77:51:e0:d1:
         d2:74:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:46:57 2025 by rpki-client